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Please add the following claims: 



40. A system for transfer of secure data on a network comprising: 

a) a client capable of presenting conformingyclient data; 

b) a server capable of using said conforming client data to create at least one 
secure cookie, each of said at least one secure cookie including: 

i) a domain field capable of holdingijomain data to associate said secure 
cookie to a domain where said Secure cookie is valid; 

ii) at least one name field capable of holding name data; 

iii) at least one value field capable of holding value data derived from said 
conforming client data; anc 

iv) an expiration field capable of holding cookie expiration data; 

c) a network capable of transporting at least one of said at least one secure cookie 
between said server>an€l gaid client; 

d) a client storage nfyjsans capable of storing at least one of said at least one secure 
cookie; and 

e) a secure attribute sel$ipe between said client and said server using said at least 
one of said at least 6n^^cure cookie. 



41. A system accordingAo claim Error! Reference source not found., wherein said 
client is a web browser. 



^ r 



42. A system according to claim Error! Reference source not found., wherein at least 
one of said at least one secure cookie is an authentication cookie. 
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43. A system according to claim Error! Reference soured not found., wherein said 
secure attribute service includes said server authepiicating said client by comparing 
said conforming client data with said value data. 

44. A system according to claim Error! Reference source not found., wherein said 
authentication cookie is an IP cookie and ^aid conforming client data includes the IP 
address of said client. 

45. A system according to claim Error! Preference source not found., wherein said 
authentication cookie is a passwoip cookie and said conforming client data includes 
a password. 

46. A system according^to clair^yferror! Reference source not found., wherein said 
password is processed using a hashing algorithm. 

47. A system accordingNp daim/Error! Reference source not found., wherein said 
password is processeo^sing an encryption algorithm. 



48. A system according to claim Error! Reference source not found., wherein said 
authentication cookie is a sign cookie and said conforming client data includes a 
digital signature on a timestamp. 
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49. A system according to claim Error! Reference $o/rce not found., further including 
a secret-key based authentication service. 

50. A system according to claim Error! Reference source not found., and wherein said 
authentication cookie is a KT cookie and ysaid conforming client data includes a 
Kerberos ticket created using a Kerberos protocol. 

51. A system according to claim Error! Reference source not found., wherein at least 
one of said at least one secure cookie includes a multitude of secure cookies. 

52. A system according to claim Enror! Reference source not found., wherein at least 
one of said at least onersecure cookie is a seal cookie capable of being used by said 
server to determine itfpnother/cookie in said multitude of secure cookies has been 
altered. 

53. A system according to j6j£j}J^rror! Reference source not found., wherein said 
seal cookie includes an integrity check value. 

54. A system according to claim Error! Reference source not found., wherein said 
seal cookie includes the signature of a message digest signed using a private key. 
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55. A system according to claim Error! Reference source not/found., wherein at least 
one of said at least one name field and at least one of sgfd at least one value field 
are a pair. 

56. A system according to claim Error! Reference source not found., wherein at least 
one of said at least one secure cookie further includes a flag, said flag specifying 
whether all machines within said domain referenced by said domain data can access 
said value data. 



57. A system according to claim Error! Reference source not found., wherein at least 
one of said at least one secure coope is a key cookie containing an encrypted 
session key, said session tey^ac/able of encrypting said value data contained in 
another of said at least one sequre cookie. 

58. A system according to cVfTi rj^ Erropf Reference source not found., wherein at least 
one of said at least one sj6 v qiM cookie is used in an electronic transaction. 



59. A system according to claim Error! Reference source not found., wherein said 
system is part of a role based access control system and at least one of said at least 
one secure cookie is used in assigning client roles. 



60. A method for tne transfer of secure data on a network including the steps of: 
a) a client n/aking a request from a server; 
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b) said server retrieving conforming client data; 

c) said server creating at least one secure coonie, each of said at least one secure 
cookie including selected conforming client data, said selected conforming data 
including at least some of said conforming client data; 

d) said server transmitting at least one of said at least one secure cookie to said 
client; 

e) said client storing at least one of s6id at least one secure cookie; 

f) said client presenting to a relate/ server at least one of said stored at least one 
secure cookie with a second request, said related server residing on the same 
domain as said server; 

g) said related server makinc/a determination of whether at least one of said at 
least one retrieved stored at least one secure cookie contains said selected 
conforming client-data/ and 

h) said related server f^filling said second request if said determination is positive. 

61 .A method of claim^ror! Reference source not found, wherein at least some of 
said conforming client data is retrieved from said client. 



62. A method of claim Error! Reference source not found., wherein said conforming 
lcluc 



client data includes a client's IP address. 



63. A method ©f claim Error! Reference source not found., wherein said conforming 
client data includes a password. 
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64. A method of claim Error! Reference source i/ot found., wherein said conforming 
client data includes a Kerberos ticket. 

65. A method of claim Error! Reference source not found., wherein said conforming 
client data includes a digital signatured 

66. A method of claim Error! Reference source not found., wherein said determination 
further includes verifying that said digital signature belongs to said client. 

67. A method of claim Error! Reference source not found., further including the step 
of said server eno^ingat least some of said selected conforming client data. 



68. A method of claim\^rror! Reference source not found., wherein said encrypting 
uses a public keyy 

69. A method of claim Error! Reference source not found., wherein said encrypting 
uses a secret key. 

70. A methoo of claim Error! Reference source not found., further including the step 
of said server decrypting said encrypted selected conforming client data using a 
private key. 
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71 .A method of claim Error! Reference source no4 found., further including the step 
of said server decrypting said encrypted selejjfted conforming client data using a 
secret key. 



72. A method of claim Error! Reference source not found., further including the step 
of said server hashing at least some of said conforming client data. 

73. A method of claim Error! Reference source not found., wherein said conforming 
client data includes data derive/3 from at least one item from the group consisting of: 

a) the client's IP address; 

b) a password; 

c) a Kerberos ticket; 

d) credit card 

e) social seci^ity number; 

f) a digital s'mdptuffi gfJ)$e client; and 

g) a home ad\ 

74. A method of cl£im Error! Reference source not found., wherein said determination 
is positive only if said selected conforming client data was retrieved by said server 
from said client during the current session. 




75. A method/of claim Error! Reference source not found., wherein said secure 
cookie contains a digital signature of said client on a time-stamp. 
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76. A method of claim Error! Reference source not found., further including the step 
of providing integrity to at least one of said a/least one secure cookie comprising: 
a) said server creating integrity data fromiit least one of said at least one secure 
cookie, said integrity data including at least one item selected from the group: 

i) encrypted said selected conforming client data; 

ii) a digital signature; and 

iii) a message digest; 



b) said server inputting 

c) said server storing sa 



lid integrity data into a seal cookie; and 
cookie. 



77. A method of claim Error!/f^fer£nce source not found., wherein said request is 
part of an electronic transaction. 

78. A method of claim terror! Reference source not found., wherein said request is 
part of an attribute-based access control function. 



In The Drawings 



Applicant thanks the examiner for pointing out that the drawings have been 
objected to by the draftsman as being informal as noted on the PTO-948. However, 
applicant notes that "formal" correction of the noted defects can be deferred until issuance 
of the Notice of Allowance. Since the formal corrections could only realistically be made 
by preparing formal drawings, applicant has decided to defer making such formal 
corrections until the issuance of a Notice of Allowance as set forth by 37 CFR 1 .85(c). 
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